How to setup 2wire router with watchguard firewall

dougdog
dougdog used Ask the Experts™
on
I have the following setup
A BT 2wire router attached to a Watchguard Firebox X Edge X10e
I only have 1 public static ip address from BT
I did not set this up originally so im not sure how it is setup.
I need to change the router as the vpn keeps dropping every few hours and the 2wire needs
switched off and on to fix it.So im hoping a new router will fix it.
Im not sure how to configure the router when you only have 1 ip address.
I think it needs to be setup in some sort of bridge mode or dmz mode but am not sure.
PS
there does not seem to be anywhere on the watchguard box to configure the addsl username and password
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
What you want to do is to put the 2wire into what's called "ethernet bridge" mode.  I'm not sure as to the specifics of that model to tell you exactly how to do it though.  Then on your Firebox, the option to set your PPPoE login and password should be somewhere in the WAN or External port configuration.  Sorry, again it's been a while since I've been in a X10e and can't recall the exact location of this setting to change.  You'll need the DSL username and password from the ISP.  There should also be a setting for this port to use DHCP or static IP addressing.  Most ISPs you can just use DHCP with and you will get the correct static IP address based on your login.  Some ISPs require that you set them manually.  I'd have the information handy and try DHCP first, get connected, then check your IP address info.  If it's correct, then you should be good to go.  If not, then you'll have to configure the settings manually.

Author

Commented:
Hi
at the minute the wan port is set to manual with the ip entered  the only other option i have is ppoe or dhcp
As i use ADSL i need to use ppoa
I am assuming that the wan port you mention is the one on the Firebox.  That being said, I don't believe your 2wire DSL modem has been setup in bridge mode.  That would be the first step, getting access to the 2wire and verifying that it is in ethernet bridge mode.  

Then you can setup the Firebox for PPPoE.  I know you stated that you have ADSL, but that doesn't necessarily mean that you have to use PPPoA to establish a connection to your ISP.  I know of very few ISPs that use PPPoA, but realize that they do exist.  Double check with the ISP to be sure.  

Either way, the PPPoE option on your wan interface will let you enter your DSL username and password information.  You may also see an option on the Firebox wan interface configuration page to keep the connection on at all times, or for the connection to be made on demand, select the option to always keep the connection on.  This is more than likely what is dropping your connection now; a lack of activity on the wire until the timeout period is reached and the 2wire is dropping your internet connection.

Once the 2wire is properly configured as an ethernet bridge and your WAN port on the Firebox is configured for PPPoE with the correct DSL username and password, you should be connected.  Verify the IP addressing is correct and your VPN comes up.  Then it will be a matter of waiting to see if the connection drops again.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
it is only the vpn that drops we still have a connection to the internet
also i cannot access the 2wire router as i dont no what ip it is on i think when it is in bridged mode it looses the ip
I don't think your 2wire router is in ethernet bridge mode.  Something has to be making the PPPoE/A connection to the ISP.  If it's not your Firebox, then it has to be the 2wire router.  I think your answer lies in the configuration of the 2wire.  Since you do not know the IP address of the 2wire, that makes it a bit more difficult to get into it and look at the configuration.  
Take a look at the configuration of the Firebox.  It has to have something in the configuration that tells you what the next hop in the connection to the internet is, that should be the IP address of the 2wire router.  
Either way, you did mention that you are replacing the 2wire router.  In that event, I would just get your replacement router configured for Ethernet Bridge mode, then configure the WAN port on the Firebox for PPPoE and enter your credentials to make the connection to your ISP.  If the router was indeed the culprit, then your connections should stop dropping.
No sense in wasting any more time on the 2wire if it's just getting replaced anyway.
Actually there is a better solution. 2wire has an option called DMZplus mode. The 2wire will get an IP address and then it will share that address with the device attached to it. So if you try to telnet to that IP, you will be prompted to the device attached to the 2wire.

If you need some help just let me know.

Author

Commented:
Yes I think it is in dmz mode
is there a way to access it

Author

Commented:
I also know that the watchguard has a static public ip assigned to it and no ISP username info on it
In the firewall configuration section. Where you choose what ports should be available, there you can see DMZplus mode as the third option.

This way, you are not needing any more info on the Watchgard device than the ip address it will receive from the 2wire.

Author

Commented:
My problem is i cannot gain access to the 2wire to check out the configuration
on my watchguard it does indeed have a ip defined as the gateway but when i try to access the 2wire from this ip i get a page cannot be displayed.
i would feel happier changing the 2wire if i could gain access to 2wire before i replace it so i could check out the way in which it is configured
Can you reset the configuration of your 2wire and connect a PC directly to it?  That way you can change the configuration accessingit with the default password, Then you can modify it as you will and connect your WatchGuard back.

Author

Commented:
thanks for your help i actually replaced the router and it solved my problem and the 2wire router was in dmzplus mode

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial